Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
  • H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
  • G06F21/31—User authentication
  • G06F21/33—User authentication using certificates
• • A—HUMAN NECESSITIES
  • A63—SPORTS; GAMES; AMUSEMENTS
  • A63F—CARD, BOARD, OR ROULETTE GAMES; INDOOR GAMES USING SMALL MOVING PLAYING BODIES; VIDEO GAMES; GAMES NOT OTHERWISE PROVIDED FOR
  • A63F13/00—Video games, i.e. games using an electronically generated display having two or more dimensions
  • A63F13/70—Game security or game management aspects
  • A63F13/71—Game security or game management aspects using secure communication between game devices and game servers, e.g. by encrypting game data or authenticating players
• • A—HUMAN NECESSITIES
  • A63—SPORTS; GAMES; AMUSEMENTS
  • A63F—CARD, BOARD, OR ROULETTE GAMES; INDOOR GAMES USING SMALL MOVING PLAYING BODIES; VIDEO GAMES; GAMES NOT OTHERWISE PROVIDED FOR
  • A63F13/00—Video games, i.e. games using an electronically generated display having two or more dimensions
  • A63F13/70—Game security or game management aspects
  • A63F13/73—Authorising game programs or game devices, e.g. checking authenticity
• • A—HUMAN NECESSITIES
  • A63—SPORTS; GAMES; AMUSEMENTS
  • A63F—CARD, BOARD, OR ROULETTE GAMES; INDOOR GAMES USING SMALL MOVING PLAYING BODIES; VIDEO GAMES; GAMES NOT OTHERWISE PROVIDED FOR
  • A63F13/00—Video games, i.e. games using an electronically generated display having two or more dimensions
  • A63F13/70—Game security or game management aspects
  • A63F13/79—Game security or game management aspects involving player-related data, e.g. identities, accounts, preferences or play histories
  • A63F13/795—Game security or game management aspects involving player-related data, e.g. identities, accounts, preferences or play histories for finding other players; for building a team; for providing a buddy list
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
  • G06F21/45—Structures or tools for the administration of authentication
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F15/00—Digital computers in general; Data processing equipment in general
  • G06F15/16—Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs
  • G06F15/163—Interprocessor communication
  • G06F15/173—Interprocessor communication using an interconnection network, e.g. matrix, shuffle, pyramid, star, snowflake
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/2109—Game systems
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/2117—User registration
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols

Definitions

• This invention relates to video game field, in particular, relates to methods and systems for authentication-based multi-user online video games.
• online video game has become a very popular entertainment.
• two or more users simultaneously play the game in a simulated environment, especially interacting with each other when more users are able to use networks (such as Internet).
• networks such as Internet
• this kind of multi-user game becomes more and more popular, the video games provided on the Internet do not support authentications of participants.
• the game participants of each video game session are normally selected at random by video game servers, and users cannot freely choose game participants.
• the problem in the exiting mechanism is:
• Unfamiliar users may be potential attackers or interveners affecting normal communications of other users, this resulting in that networks are unstable and users' requirements of real-time data cannot be guaranteed.
• important information of users might be exposed to the unfamiliar users.
• this invention aims to provide a method and system for authentication-based multi-user online video game, and an authentication-based communication method and system.
• DTMF dual-tone multi-frequency
• HSS Home Subscriber Server
• IFC Initial Filter Criteria
• IMS IP Multimedia Subsystem
• MRF Media Resource Function
• CSCF Call Session Control Function
• S-CSCF Serving CSCF
• P-CSCF Proxy CSCF
• VGDB Video Game Database
• VGID Video Game ID
• VGS Video Game Server
• the invention provides a method, comprising: registering user groups to a video game server, and assigning video game identifiers for said user groups; authenticating a video game identifier and an authorization certificate input by a user; and registering said user to the video game server and said user groups if both the video game identifier and the authorization certificate are authenticated successfully.
• a system comprising: means for registering user groups to a video game server and assigning video game identifiers for said user groups; means for authenticating a video game identifier and an authorization certificate input by a user; and means for registering said user to the video game server and said user groups, when both the video game identifier and authorization certificate are authenticated successfully.
• a communication method characterized in that, comprising: registering user groups to a communication server, and assigning communication identifiers for said user groups; authenticating a communication identifier and an authorization certificate input by a user; and registering said user to the communication server and said user groups if both the communication identifier and the authorization certificate are authenticated successfully.
• a system comprising: means for registering user groups to a communication server and assigning communication identifiers for said user groups; means for authenticating a communication identifier and an authorization certificate input by a user; and means for registering said user to the communication server and to said user groups if both the communication identifier and the authorization certificate are authenticated successfully.
• a system comprising: a Web server, for registering user groups to a video game server and assigning video game identifiers for said user groups; and a video game server, for authenticating a video game identifier and an authorization certificate input by a user, and registering said user to the video game server and said user groups, if both the video game identifier and the authorization certificate are authenticated successfully.
• a system comprising: a Web server, for registering user groups to a communication server and assigning communication identifiers for said user groups; and a communication server for authenticating a communication identifier and an authorization certificate input by a user, and registering said user to the communication server and said user groups if both the communication identifier and the authorization certificate are authenticated successfully.
• user groups are created based on requirements preset by the user, before the user groups are registered to the video game server.
• the user can register to one or more user groups.
• a refusing registration message is sent to the user.
• the authorization certificate is authenticated successfully while the video game identifier is not authenticated successfully, said user will not be registered to any user group, but to the video game server.
• Fig.1 illustrates a structural diagram of an authentication-based multi-user online video game system according to the embodiment of the invention
• Fig.2 illustrates a method for an authentication-based multi-user online video game according to the embodiment of the invention
• Fig.3 illustrates a structural diagram of an authentication-based multi-user online video game system in an IP multimedia subsystem according to the embodiment of the invention
• Fig.4 illustrates a structural diagram of a communication system according to another embodiment of the invention.
• Fig.5 illustrates a method for an authentication-based communication according to the embodiment of the invention.
• Fig.1 illustrates a structural diagram of an authentication-based multi-user online video game system according to the embodiment of the invention.
• Said system includes, but is not limited to: a portal website, a Web server, a video game server, a video game database, a network and a user terminal.
• the portal website is an interface for registering one or more user groups to a video game server, and a game coordinator registers one or more user groups to a video game server through the portal website.
• the Web server assigns a video game identifier (VGID) to each user group, said VGI D being a unique identifier for differentiating user groups.
• the VGID could be any universal symbol, such as number, string or combinations thereof.
• the Web server sends the VGID to a game coordinator and video game database.
• the Web server requests the user terminal to input an authorization certificate, and the user terminal can be registered to the video game server only when the input authorization certificate is authenticated successfully.
• the authorization certificate is issued by the video game server, and it could be password or the like.
• the video game database is used for storing the VGIDs and related certificates assigned by the Web server.
• the video game server is used for providing online video game, authenticating game and managing online video game.
• the network provides a communication connection for the user terminal, portal website, Web server and video game server, which could be a wired or wireless network.
• the user terminal obtains a VGID from the game coordinator, acquires an authorization certificate from the video game server, and is capable of utilizing the authorization certificate to login the video game server through the network.
• the user terminal can use the VGID to join a specific user group.
• Fig.2 illustrates a method for an authentication-based multi-user online video game according to the embodiment of the invention.
• Step 1 creating user groups based on requirements preset by the user.
• a game coordinator creates user groups in accordance with requirements preset by the user, wherein the requirements preset by the user may include (but are not limited to): user's location, age, name, career, etc, and combinations thereof.
• the game coordinator may also create user groups based on the request of the user or of the game server.
• Step 2 registering the user groups to a video game server, and assigns video game identifiers for said user groups.
• the game coordinator registers each user group to the video game server through a portal website; Then, a Web server assigns for each user group a VGID and an authorization certificate used for logging on the video game server, and issues the VGIDs and authorization certificates to the game coordinator which issues the VGIDs and authorization certificates to the user;
• the Web server stores the VGIDs and authorization certificates in a video game database.
• Step 3 authenticating the VGIDs and authorization certificates input by the user.
• VGIDs and authorization certificates users of video games are able to use the authorization certificates to log on the video game server through the network, and to use the VGIDs to join the user groups.
• a user does not input a VGID or the VGID input by him is not authenticated successfully, he cannot join any user group.
• the VGIDs and authorization certificates could be an encrypted value and hash value.
• the VGS Upon receiving an authorization certificate input by the user, the VGS retrieves the authorization certificates stored in the video game database and compares them with the authorization certificate provided by the user to conduct an authentication on the authorization certificate. If the authorization certificate is authenticated successfully, the user will then be allowed to log on the VGS; otherwise the user will be refused by the VGS.
• the VGS Upon receiving a VGID input by the user, the VGS retrieves the VGIDs stored in the video game database and compares them with the VGID provided by the user to conduct an authentication on the VGID. If the VGID is authenticated successfully, the user will then be registered to a user group corresponding to the VGID; otherwise the user will not be registered to any user group.
• the user may not input a VGID, or may input one or more VGIDs.
• the VGS will not register the user to any user group.
• the VGS authenticates the VGID, and if the VGID is authenticated successfully, the user will be registered to a user group corresponding to the VGID; otherwise the user will not be registered to any user group.
• the VGS authenticates the plurality of VGIDs respectively, and adds the user to user groups corresponding to the VGIDs that are authenticated successfully. Wherein, if all of the plurality of VGIDs can not be authenticated successfully, the user will not be added to any user group.
• Fig.3 illustrates a structural diagram of an authentication-based multi-user online video game system in an IP multimedia subsystem according to the embodiment of the invention.
• the system includes but is not limited to: a portal website, a Web server, an IMS video game server, a home subscriber server (HSS) (including a video game database), an IP multimedia subnet and a user terminal.
• the portal website is an interface registering one or more user groups to a video game server, and a game coordinator registers one or more user groups to a video game server through the portal website.
• the Web server assigns a video game identifier (VGID) to each user group, said VGID being a unique identifier for differentiating user groups.
• the VGID could be any universal symbol, such as number, string or combinations thereof.
• the Web server sends the VGID to the game coordinator and HSS which stores the VGID in the video game database.
• the Web server requests the user terminal to input an authorization certificate, and the user terminal can be registered to the IMS video game server only if the input authorization certificate is authenticated successfully.
• the authorization certificate is issued by the IMS video game server, and it could be password or
• the HSS including a video game database, is used for storing the VGIDs and related certificates assigned by the Web server.
• the IMS video game server is used for providing online video game, authenticating game and managing online video game.
• the network provides a communication connection for the user terminal, portal website, Web server and video game server, which could be a wired or wireless network.
• the user terminal obtains a VGID from the game coordinator, acquires an authorization certificate from the IMS video game server, and is capable of utilizing the authorization certificate to login the IMS video game server through the network.
• the user terminal can use the VGID to join a specific user group.
• the IP multimedia subnet comprises: a serving call session control function (S-CSCF), a proxy call session control function (P-CSCF), and an interrogating call session control function (l-CSCF).
• S-CSCF executes the session control function, and maintains session status information depending on the requirements of network operators.
• P-CSCF proxy call session control function
• l-CSCF interrogating call session control function
• the S-CSCF executes the session control function, and maintains session status information depending on the requirements of network operators. In the networks of a same network operator, different S-CSCF may have different functions. But in one calling process, the S-CSCF needs to accomplish the following functions:
• Registration it may serve as a register to make the requested information take effect through a location server after receiving a registration request;
• Processing information streams associated and unassociated with the session comprising: performing a session control for a registered session terminal and serving as a proxy server; after receiving a request, conducting an internal processing or forwarding the request; Or, serving as a user proxy, interrupting or independently initiating a SIP services, providing services for the user by interacting with a service platform, and providing service information related with the terminal.
• the P-CSCF is the first contact node.
• the user device acquires the address of the P-CSCF through a local CSCF discovery process.
• the P-CSCF serves as a proxy server which processes or forwards the received requests and services, and the P-CSCF may also serve as a user agent to terminate or independently initiates SIP services under abnormal circumstances.
• the main function of the P-CSCF comprises: forwarding the SIP registration request message sent from the UE to the l-CSCF which is decided by the domain name provided; forwarding the SIP message sent from the UE to the SIP server, the name of which is obtained by the P-CSCF when the UE initiates a registration; generating a billing record; supporting the encryption process between the UE and P-CSCF; compressing and decompressing the SIP message; and carrying the authentication of resources and QoS management.
• the l-CSCF may be served as a connection point of all the network users, and may be used as a service access point of roaming users in the current network service area.
• Step 1 creating user groups based on requirements preset by the user.
• a game coordinator creates user groups in accordance with requirements preset by the user, wherein the requirements preset by the user may include (but are not limited to): user's location, age, name, career, etc, and combinations thereof.
• the game coordinator may also create user groups based on the request of the user or of the game server. Step 2: registering the user groups to a video game server, and assigns video game identifiers for said user groups.
• the game coordinator registers each user group to the IMS video game server through a portal website.
• a Web server assigns for each user group a VGID and an authorization certificate used for logging on the video game server, and issues the VGIDs and authorization certificates to the game coordinator which issues the VGIDs and authorization certificates to the user.
• VGID is an important IMS public user identity.
• the Web server sends the VGIDs and authorization certificates to a home subscriber server (HSS) which stores the VGIDs and authorization certificates in the video game database in the HSS.
• HSS home subscriber server
• the Web server also updates user profiles for the VGIDs newly created in the video game database (VGDB) in the HSS, for example, creating an initial filter criterion of the VGID, such that when the IMS video game server requests to access VGID, the VGID is retrieved that forwarded to the IMS video game server.
• VGDB video game database
• Step 3 authenticating the VGIDs and authorization certificates input by the user.
• the IMS video game server may use a media resource function (MRF) to indicate the users to input their certificates.
• MRF media resource function
• the VGIDs and authorization certificates could be an encrypted value and hash value.
• the IMS video game server Upon receiving an authorization certificate input by the user, the IMS video game server retrieves the authorization certificates stored in the video game database of the HSS and compares them with the authorization certificate provided by the user to conduct an authentication on the authorization certificate. If the authorization certificate is authenticated successfully, the user will then be allowed to log on the IMS video game server; otherwise the user will be refused by the IMS video game server.
• the IMS video game server Upon receiving a VGID input by the user, the IMS video game server retrieves the VGIDs stored in the video game database and compares them with the VGID provided by the user to conduct an authentication on the VGID. If the VGID is authenticated successfully, the user will then be registered to a user group corresponding to the VGID; otherwise the user will not be registered to any user group.
• the user may not input a VGID, or may input one or more VGIDs.
• the IMS video game server will not register the user to any user group.
• the IMS video game server authenticates the VGID, and if the VGID is authenticated successfully, the user will be registered to a user group corresponding to the VGID; otherwise the user will not be registered to any user group.
• the IMS video game server authenticates the plurality of VGIDs respectively, and adds the user to user groups corresponding to the VGIDs that are authenticated successfully. Wherein, if all of the plurality of VGIDs can not be authenticated successfully, the user will not be added to any user group.
• Fig.4 illustrates a structural diagram of a communication system according to another embodiment of the invention.
• the system includes but is not limited to: a portal website, a Web server, a communication server, a communication database, a network and a user terminal.
• the portal website is an interface for registering one or more user groups to a communication server, and a game coordinator registers one or more user groups to a communication server through the portal website.
• the Web server assigns a communication identifier (CMID, CoMmunication ID) to each user group, said CMID being a unique identifier for differentiating user groups.
• the CMID could be any universal symbol, such as number, string or combinations thereof.
• the Web server sends the CMID to the game coordinator and communication database.
• the Web server requests the user terminal to input an authorization certificate, and the user terminal can be registered to the communication server only when the input authorization certificate is authenticated successfully.
• the authorization certificate is issued by the communication server, and it could be password or the like.
• the communication database is used for storing the CMIDs and related certificates assigned by the Web server.
• the communication server is used for providing online communication, authenticating game and managing online communication.
• the network provides a communication connection for the user terminal, portal website, Web server and communication server, which could be a wired or wireless network.
• the user terminal obtains a CMID from the game coordinator, acquires an authorization certificate from the communication server, and is capable of utilizing the authorization certificate to login the communication server through the network.
• the user terminal can use the CMID to join a specific user group. How to implement a communication method of an authentication-based in the system illustrated by Fig.4 according to the embodiment of the invention is described in the following content.
• Fig.5 illustrates a method for an authentication-based communication according to the embodiment of the invention.
• Step 1 creating user groups based on requirements preset by the user.
• a Web server creates user groups in accordance with requirements preset by the user, wherein the requirements preset by the user may include (but are not limited to): user's location, age, name, career, etc, and combinations thereof.
• the Web server may also create user groups based on the request of the user or of a communication server.
• Step 2 registering the user groups to the communication server, and assigns communication identifiers for said user groups.
• the game coordinator registers each user group to the communication server through a portal website
• a Web server assigns for each user group a communication identifier (CMID) and an authorization certificate used for logging on the communication server, and issues the CMIDs and authorization certificates to the Web server which issues the CMIDs and authorization certificates to the user;
• CMID communication identifier
• authorization certificate used for logging on the communication server
• Step 3 authenticating the CMIDs and authorization certificates input by the user.
• the communication users are able to use the authorization certificates to log on the communication server through the network, and to use the CMIDs to join the user groups.
• the communication users When a user does not input a CMID or the CMID input by him is not authenticated successfully, he cannot join any user group.
• the CMIDs and authorization certificates could be an encrypted value and hash value.
• the communication server Upon receiving an authorization certificate input by the user, the communication server retrieves the authorization certificates stored in the communication database and compares them with the authorization certificate provided by the user to conduct an authentication on the authorization certificate. If the authorization certificate is authenticated successfully, the user will then be allowed to log on the communication server; otherwise the user will be refused by the communication server.
• the communication server Upon receiving a CMID input by the user, the communication server retrieves the CMIDs stored in the communication database and compares them with the CMID provided by the user to conduct an authentication on the CMID. If the CMID is authenticated successfully, the user will then be registered to a user group corresponding to the CMID; otherwise the user will not be registered to any user group.
• the user may not input a CMID, or may input one or more CMIDs.
• the communication server will not register the user to any user group.
• the communication server authenticates the CMID, and if the CMID is authenticated successfully, the user will be registered to a user group corresponding to the CMID; otherwise the user will not be registered to any user group.
• the communication server authenticates the plurality of CM IDs respectively, and adds the user to user groups corresponding to the CMIDs that are authenticated successfully. Wherein, if all of the plurality of CMIDs can not be authenticated successfully, the user will not be added to any user group.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Multimedia (AREA)
• Theoretical Computer Science (AREA)
• Software Systems (AREA)
• Business, Economics & Management (AREA)
• General Business, Economics & Management (AREA)
• General Engineering & Computer Science (AREA)
• Computer Hardware Design (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Computing Systems (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Information Transfer Between Computers (AREA)
• Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
• Data Exchanges In Wide-Area Networks (AREA)

Priority Applications (2)

Applications Claiming Priority (2)

Publications (1)

Family

ID=46092969

Family Applications (1)

Country Status (4)

Cited By (2)

Families Citing this family (4)

Citations (5)

Family Cites Families (4)

• 2010
  • 2010-11-24 CN CN201010574810.XA patent/CN102480487B/zh not_active Expired - Fee Related
• 2011
  • 2011-10-14 EP EP11843717.7A patent/EP2663949A4/en not_active Ceased
  • 2011-10-14 WO PCT/IB2011/002835 patent/WO2012069920A1/en active Application Filing
  • 2011-10-14 US US14/004,200 patent/US9380049B2/en active Active

Patent Citations (5)

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events